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An object-oriented, 
distributed architecture provides 
a suite of applications supporting 
pre-paid electronic commerce 
on Internet, Intranet or Extranet, 
including roaming transactions 
and transaction shipping involving 
more complex configurations. An 
input device (ID) is employed for 
receiving a request for a service 
from an end-user. The transaction 
manager (TM) requests the 
rating device (RD) to determine 
whether or not the transaction can 
take place given the remaining 
balance. If the user's balance 
is sufficient, the service device 
(SD) proceeds the transaction, 
rendering the requested service. 
The account device (AD) updates 
the user's remaining balance. A 
transaction data record is queued 
to the output device (OD). A 
typical roaming situation involves 
two transaction servers, called 
TxS devices. The first TxS device 
holds the input device (ID) and 
the service device (SD). The 
second TxS device holds the 
universal account device (AD) 
and the output device (OD). 
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ELECTRONIC COMMERCE METHODS AND APPARATUS 

Field of the invention 
This invention relates generally to electronic 
commerce and, in particular, to an object-oriented, 
distributed architecture providing a suite of applications 
5 for implementing prepaid e-commerce in internet, intranet, 
and extranet environments. 

Background of the Invent ion 
Although a precise definition has yet to be 
adopted, electronic commerce or e-commerce, as it is 
10 called, generally means the process of conducting business 
transactions via networked computers, whether through 
direct connections or over the internet. Regardless of the 
definition, e-commerce includes various 

business-to-business transactions, including many on-line 
15 retail and financial processes. 

The trend toward e-commerce began some 25 years 
ago, when larger corporations began transacting business 
with subsidiaries and suppliers over private networks. 
Recently, e-commerce has become more synonymous with 
20 business carried out over the internet, through webs sites, 
for example, to sell goods, services, and information to 
consumers . 

Reliability, security and privacy remain concerns 
with regard to conducting business over the internet. 
25 Being packet -switched, internet messages typically move 
through various computers before arriving at a final 
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destination, raising the potential for unauthorized 
interception. Existing architectures that depend upon 
internet protocols or e-mail communications therefore 
generally employ encryption schemes to enhance security. 
5 Other approaches address such problems through direct links 
to commercial banking networks, which often require users 
to open and maintain an account. 

Generally speaking, most existing approaches to 
e-commerce rely on encryption involving the distribution of 

10 public or private encryption keys, which, in turn, requires 
measures to ensure that the keys are not lost or stolen. 

Existing techniques also present problems in 
terms of network comparability. Telephony platforms based 
upon voice communications use switched networks, whereas 

15 the internet relies on packet routing. Whereas the 
switched network is based upon establishing a physical 
link, the internet routes packets from node-to-node to 
establish a communication. There is concern among internet 
users that the source and destination addresses are, 

20 themselves, not secure and subject to hacking activities. 

Prior-art approaches to e-commerce generally use 
a hybrid configuration involving both switched and packet 
routing. A dial-up connection is used to gain access to 
the internet, for example. This hybrid approach generally 

25 does not yield the best of both worlds, however, since 
encryption keys must still be used with source and 
destination addresses subject to unauthorized tampering. 
The need still remains, therefore, for a pure e-commerce 
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solution, preferably one which permits different kinds of 
transactions to occur through a consistent architecture. 

Summary of the Invention 
The subject invention resides in electronic 
5 commerce systems and processes, particularly with respect 
to the processing of pre-paid transactions. The invention 
is specifically directed to an object-oriented, distributed 
architecture providing a suite of applications in support 
of electronic commerce through web service platforms on the 

10 internet or other points of sale, including intranet and 
extranet environments. The invention is not limited by the 
size of the transactions, and takes into account 
micropayments of the type which might otherwise be 
economically impractical through credit -card purchases. 

15 A method of performing a pre-paid electronic- 

commerce transaction includes the steps of receiving a 
service request from a user, and creating a transaction 
instance. Information relating to the user's PIN and 
remaining balance are retrieved to determine whether or not 

20 the transaction can take place given the user's remaining 
balance and, if the user's PIN is sufficiently funded, the 
transaction proceeds, rendering the requested service. An 
unrated service data record is returned, and the price of 
the goods or services is calculated based upon the service 

25 data record. The PIN balance is updated, and a transaction 
data record is generated. 

Five device components are preferably employed to 
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complete a transaction, thus enabling any transaction 
server (TxS tra ) to be local or remote. A preferred system 
for carrying out electronic commerce in accordance with the 
invention includes the following components, the operations 

5 of which are coordinated by a transaction manager: an input 
device, an account device, a rating device, a service 
device, and an output device. 

The input device is employed for receiving a 
request for a service from an end-user through a business 

10 application, forming part of an internet web page, for 
example, or through the use of a virtual device called the 
Payment Portal tm . The Payment Portal may be viewed as an 
expandable widget /icon which resides independently on any 
web browser/page. When selected the widget/icon is 

15 activated on the WEB page being viewed, allowing the end 
user to select the payment method, enter into a secure mode 
and then, if prepaid is selected, enter a debit account 
number (PIN) and a password in the fields provided for 
access to the prepaid account. 

20 The account device performs account -management 

functions, including PIN verification operations. The 
rating device is used to calculate the purchase price 
associated with the service to be provided, as when 
purchasing time for multi-user games, downloading newspaper 

25 articles, etc. The service device actually provides the 
service. The output device for maintains transaction data 
record (TDR) queues accessible through a business 
application. 
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Through transaction shipment, an end user of the 
invention is not limited by geographic or national 
boundaries . Such roaming enables the end user to travel 
outside of a home location to an access point such as a web 
5 service platform on the internet or 
intranet/extranet/point-of -sale terminal in a country or 
region different from the one in which they normally 
receive service. 

A typical roaming situation involves two TxS tttt 

10 devices. The first device, identified as a foreign TxS, is 
the place where the end user initiates the transaction. 
The second device, identified as the home TxS, holds the 
business information for the pre-paid account. It is the 
home device which is associated with a TxS that holds the 

15 PIN business information. 

The foreign TxS receives the end-user request and 
renders the service, once the PIN balance has been checked. 
The home TxS is requested by the foreign TxS to retrieve 
the PIN balance, perform the rating, and update the 

20 account. The nature of the distributed architecture 
enables roaming to be performed without any PIN data 
replication, thereby eliminating data inaccuracy and 
consistency issues. 

The use of transaction shipment is not restricted 

25 to a typical roaming situation, but also applies to more 
complex roaming situations. For example, in a 3 -TxS 
roaming situation, TxS#l captures the request (ID) and 
services the requests (SD) ; TxS#2 holds the universal 
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account device (AD) and the output device (OD) ; and TxS#3 
holds the rating modules (RD) . 

Brief Description of the Drawings 
FIGURE 1 is a drawing of a four- layer 
5 architecture according to the invention; 

FIGURE 2 is a drawing of a business model 
according to the invention including five components 
coordinated by a transaction manager; 

FIGURE 3 illustrates different transaction steps 
10 associated with a pre-paid electronic commerce example; 

FIGURE 4 illustrates the transaction of Figure 3 
in the form of a flow diagram; 

FIGURE 5 illustrates a typical roaming situation 
involves two transaction server devices; 
15 FIGURE 6 illustrates a transaction shipment 

according to the invention; 

FIGURE 7 depicts a roaming situation utilizing 
three transaction server devices; 

FIGURE 8 illustrates an example using a pre-paid 
20 service from an HTML Web Page; 

FIGURE 9 is a diagram which shows how an end user 
may enter order information in through an HTML page; 

FIGURE 10 is a portion of an HTML page which 
contains a form whose action property invokes 
25 CorbaCgiServlet . doGet ; 

FIGURE 11 provides a simplified code sample of 
CorbaCgiServlet ; 
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FIGURE 12 illustrates important transaction steps 
associated with a web service example; 

FIGURE 13 shows how, if more sophisticated 
features are required on the client side, the service HTML 
5 page can include references to embedded Java applets; 

FIGURE 14 is a UAD Entity Relationship Diagram 
based on a simple, two-entity model; 

FIGURE 15 represents a JAVA application and JAVA 
installation according to the invention; 
10 FIGURE 16 illustrates X/Open and OTS interfaces 

with respect to a credit/debit example according to the 
invention; 

FIGURE 17 is a UML diagram which depicts a 
transaction inheritance tree; 
15 FIGURE 18 is a UML diagram which depicts a 

transaction data record; 

FIGURE 19 is a UML diagram which depicts the 
transaction server and devices according to the invention; 

FIGURE 20 is a UML diagram which depicts requests 
20 and transaction creation; and 

FIGURE 21 is a UML diagram which depicts object 
interaction for the transaction shipments that occur in the 
typical roaming situation. 

Detailed Descrip tion of the Invention 
25 This invention resides in electronic commerce 

systems and processes, particularly with respect to the 
processing of pre-paid transactions. The invention is 
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specifically directed to an object-oriented, distributed 
architecture providing a suite of applications in support 
of true electronic commerce, as might be implemented 
through various wide- and local -area network service 
5 platforms or other points of sale (POS) , including smart 
devices such as a PDA (Personal Digital Assistant) , or 
virtual devices such as the Payment Portal tm described in 
further detail below. Although specific examples 

will make reference to the internet, one of skill in the 
10 art of distributed transaction processing will recognize 
that the invention is equally applicable to intranet and 
extranet environments. Nor is the invention limited by the 
size of the transactions, and takes into account 
micropayments of the type which might otherwise be 
15 economically impractical through credit-card purchases. 

In a preferred embodiment the invention uses a 
consistent four-layer architecture as shown in Figure 1. 
Broadly, the architecture integrates a business application 
suite to an enterprise node called the transaction server 
20 (TxStm) , in such a way that transactions may be executed in 
a fully distributed mode. That is, a transaction initiated 
on one node may involve other nodes in order to be 
completed. 

The top layer of the architecture is the business 
25 application level which pulls transaction records from the 
TxS and performs back-office operations. The TxS engine 
layer manages pre-paid distributed transactions. The TxS 
engine is free of vendor- specif ic features, and has an open 
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architecture, in that pre-paid accounts can be initially 
set up by an existing debit platform vendor* s software, 
then later used for other kinds of pre-paid services 
through the TxS. 
5 The device encapsulation layer enables a vendor 

platform or a server/device to interface with the TxS. The 
TxS interface defines a set of operations allowing 
distributed transactions. This layer is platform specific, 
in that interfaces must be written every time one 

10 integrates with a new type of service platform. However, 
since all WEB servers comply with standard interface 
specifications, this layer has already been implemented. 
The bottom layer is the service platform layer, which may 
function as a web server, point of sale, PDA, or other 

15 smart device. 

The TxS engine defines interfaces for CORBA 
(Common Object Request Broker Architecture) services, and 
each service has a corresponding set of operations. Once 
a service has been made available, any of its operations 

20 can be requested over the network. Integrating a service 
platform with the TxS also implements its related 
interfaces. With respect to prepaid telephony, the TxS 
does not execute any debit functions or call processing. 
The TxS performs all debit processing steps as a pure 

25 e- commerce server solution for prepaid payments over 
internet/intranet/extranet . 

As shown in Figure 2, the TxS business model 
consists of five components whose coordination is ensured 
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by a transaction manager (TM) . These components are: 

1. The input device through which end-user 
requests are received, as through a web page or virtual 
device forming part of a web-enabled service. 
5 2 . The account device which is responsible, for 

carrying out lock, read and update PIN operations. 

3. The rating device, which calculates purchase 
price of goods and services for the end-user. 

4. The service device, which renders the actual 
10 service, such as connecting multiple parties through a 

TCP/IP connection. 

5. The output device, which maintains multiple 
transaction data record (TDR) queues available for the 
business application. The TxS engine defines interfaces for 

15 creating CORBA services, such that each service owns a set 
of operations. Once a service has been made available, any 
operation can be requested across the network. 

Payment Portal'" 

In terms of the input device, the Payment Portal 

20 is one the techniques that the TxS may use for making 
network payments for products or services with a prepaid 
payment method using a debit account (or with a post-paid 
payment method associated with a credit card number) . The 
Payment Portal may be viewed as an expandable widget/icon 

25 which resides independently on any web browser/page. When 
selected, the widget/icon will expand on the WEB page being 
viewed, allowing the end user to select the payment method, 
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enter into a secure mode and then, if prepaid is selected, 
enter a debit account number (PIN) and a password in the 
fields provided. 

The web page requesting payment will pass account 
5 device location and rate device location information to the 
Payment Portal. If a prepaid method is being used, the 
authorization of the account can be executed. If a 
purchase is authorized, the account decrementation can be 
accomplished at the account device specified. The final 
10 balance after the purchase will be shown in the Payment 
Portal . 

A history of payments can be provided to the end 
user. In case of an estimate of the item ! s price, the rate 
device specified can be used to calculate the price without 

15 a purchase being made or without sufficient funds being 
available. The results are shown to the user in the 
Payment Portal's user interface. 

Another use of the Payment Portal will be to top 
off (i.e., reload) any prepaid account balance at the 

20 specified account device with a credit card or through a 
home banking application where the end user can move some 
amount of money from a bank or credit card account to the 
prepaid account . 

PRE-PAID E - COMMERCE TRANSACTIONS 
25 By way of a review, the transaction server or TxS 

is an e-commerce server that can be used for various types 
of pre-paid services, including pre-paid services on the 
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Internet. With its account service, the TxS provides debit 
account management services, including account 
authorization, debiting and updating. Figures 3 and 4 
illustrate the different transaction steps associated with 
5 a pre-paid electronic commerce example. Referring first to 
Figure 3, the primary steps are as follows: 

1 . Incoming request 

2 . The transaction manager creates a 
transaction instance 

10 3 . PIN authorization, lock and remaining 

balance retrieval 

4 . The TM requests the RD to determine whether 
or not the transaction can take place, given the remaining 
balance . 

15 5. If the PIN is sufficiently funded, the 

transaction manager requests the service device to proceed 

with the transaction. 

6. Service platform renders the requested 

service (for example, placing an order) . 
20 7. The service device returns a raw (not rated) 

service data record (SDR) . 

8. The raw SDR is handed over to the rating 

device in order to calculate the cost of the transaction 

(ie, the purchase price of the goods or services) . 
25 9. The transaction manager requests the account 

device to update the PIN balance and unlock the PIN. 

10 . A TDR is queued to the output device 

11. The business application retrieves the TDR. 
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Figure 4 illustrates the transaction in the form 
of a flow diagram. 

TYPICAL ROAMING SITUATION (TRS) 
As discussed above, five device components are 
5 preferably employed to complete a transaction, thereby 
enabling any TxS device to be local or remote. Roaming 
provides the ability for any end-user to travel outside of 
their home location by a local access point (for example, 
a POS) in a country or region different from the one in 

10 which they normally receive service. An end-user is not 
limited by geographic or national boundaries. Roaming 
creates a global system for end users. 

Figures 5 illustrates a typical roaming situation 
involves two TxS devices. The first device, identified as 

15 a foreign TxS, is the place where the end user initiates 
the transaction. The second device, identified as the home 
TxS, holds the business information for the pre-paid 
account. This platform is associated with a TxS that holds 
the PIN business information. The foreign TxS receives the 

20 end user request and renders the service once the PIN 
balance has been checked. The home TxS is requested by the 
foreign TxS to retrieve the PIN balance, to perform the 
rating and update the account. All the transaction steps 
are executed. The rating device and the account device 

25 operations are executed on a remote TxS. Note that the 
distributed architecture enables roaming to be performed 
without any PIN data replication, thereby eliminating data 



WO 99/44165 



PCT/US99/04132 



- 14 - 

inaccuracy and consistency issues. 

Two transaction managers are involved in the 
roaming situation just described. The transaction keeps 
running on one node as long as transaction steps can be 
5 executed locally. The transaction ships to another TxS 
node if a transaction step cannot be executed locally. 

TRANSACTION SHIPMENT FOR TYPICAL ROAMING SITUATION 

It is important that it should only take two 
messages back and forth to carry out a TRS transaction. 

10 This is achieved with transaction shipment, as shown in 
Figure 6. In order to minimize the number of CORBA 
messages, a transaction keeps running on a TxS node as long 
as its local devices can service the request. The 
transaction ships to another TxS as soon as an operation 

15 (i.e., a transaction step) cannot be performed locally. 
Transaction shipment is of course not restricted to TRS 
transactions. It actually applies to all roaming 
situations. Figure 7 depicts a 3-TxS roaming situation, 
wherein: 

20 1. TxS#l captures the request (ID) and services 

the requests (SD) , 

2. TxS#2 holds the universal account device (AD) 
and the output device (OD) , and 

3 . TxS#3 holds the rating modules (RD) . 

25 WEB SERVICE PLATFORM EXAMPLE 

The following section describes an example using 
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a pre-paid service from an HTML Web Page, as depicted in 
Figure 8. This application would be useful, for example, 
for placing any kind of order from a WEB browser. This 
embodiment implements an input device that allows the 
5 end-user to enter a pre-paid transaction request from an 
HTML page. The primary goal of this integration is to 
deliver the end-user request to the TxS . Being a true 
e- commerce transaction, the account device need not be 
specific, allowing a basic universal account device to be 
10 used in this implementation. The account device may even 
be an account device previously used for another kind of 
service. 

A specific rating device must be implemented, 
since parameters entered from the WEB page will be used to 

15 calculate the price of the goods or services purchased. 
For example, in a pizza ordering service, the end user 
chooses a pizza size and the toppings. These are 
quantifiable parameters used for calculating the pizza 
price. Discounts, club points, promotions and other sales 

20 methods can also be part of the rating model used. The 
service device takes care of placing the actual order. It 
might consist of writing a record in a database, or for 
example, sending a fax to the fulfillment center. 

In this particular example, the input device may 

25 include a CORBA servlet that can be requested from any 
network node. The end user enters the order information in 
the HTML page, as shown in Figure 9. When the end user 
submits its request, the HTTP Servlet DoGet method is 
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invoked. The DoGet method locates and requests the CORBA 
Server. 

The order entered on the Web page is eventually- 
stored in a database by the service device. The orders 
5 placed in a database can be processed by an external 
application. The implementation comprises the following 
elements : 

Web Server: 
Any Web Server. 

10 Input Device: 

This component is an Input Device Implementation created 
from the MTG CORBA interface tmg. engine. InputDevice. 

OrderServer : 

CORBA service object associated with the Input Device. It 
15 is used by the Web Server to send an End User Request to 
the TxS. The Input Device creates the CORBA Server 
instance. The Order Server is a registered CORBA service 
whose name is "OrderServer" and that was created from the 
CORBA interface tools, web. CorbaCgilnterf ace. 

20 CorbaCgiServlet : 

Tools .web. CorbaCgiServlet extends 
javax.servlet.http.HtrtpServlet. Its DoGet method is 

called when the user submits their page to the HTTP Server. 
The CorbaCgiServlet is a CORBA client of the Order Server. 
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The HTML page contains a form whose "action" 
property invokes CorbaCgiServlet .doGet . It also has a 
property which gives the name of the OrderServer CORBA 
service, as shown in Figure 10. The CorbaCgiServlet, 
5 shown in the paragraph of Figure 11, provides a simplified 
code sample of CorbaCgiServlet . The doGet method retrieves 
the AdsServer name from the HTTP Request parameters and 
locates the corresponding CORBA service. The doGet method 
uses the servlet output stream to return a dynamically 
10 built HTML page. 

Transactions Steps (Figure 12) 

0 The end-user submits the page to the Web 
Server. The HTTP request contains all the data entered by 
the end user (Prefix, PIN number, Order Description) . The 

15 Do Get method of the Servlet is called. 

1 The DoGet Method locates the CORBA Order 
Servlet associated with the input device and calls its 
"exec" method with the end user request as a parameter. 
The order servlet places the request in the input device 

20 queue. The "exec" method is synchronous, and waits until 
the end of the transaction. 

2 The transaction manager reads the ID queue 
and creates a transaction instance. 

3 PIN authorization, lock and remaining 
25 balance retrieval 

4 The TM requests the rating device to 
calculate the price of the goods or services purchased. 
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5 If the PIN is sufficiently funded, the 
transaction manager requests the service device to proceed 
with the transaction. 

6 Create a new order in the orders database. 
5 7 The order has been created and the service 

device returns a service data record 

8 Unlike telephony, the rating operation for 
ordering a physical item here is a void one, since the 
purchase price is known before the transaction has ended. 

10 However, for services that are metered, such as, 
interactive games and chat encounters, the rating will be 
done in real-time as the transaction is on-going. 

9 The transaction manager requests the account 
device to update the PIN balance and unlock the PIN. A TDR 

15 is created and placed in one of the transaction manager 
queue . 

10 The order server "exec" dynamically creates 
an HTML response page depending on the transaction outcome 
and then returns it to the CorbaCgiServlet . 

20 11 The CorbaCgiServlet prints the dynamically 

created page into its output stream. The page is then 
displayed in the end user's Web browser. 

Alternative Architecture (Figure 13) 

The Web Service architecture described above uses 
25 plain HTML pages that do not contain downloadable applets. 
A servlet is used for establishing communication with the 
TxS and this servlet is a client of the CORBA Order Server. 
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If more sophisticated features are required on the Client 
side, the service HTML page can include references to 
embedded Java applets. In this architecture, shown in 
Figure 13, the applet is the Client of the CORBA Order 
5 Server. 

The Java client typically interacts with the server as 
follows : 

1 . Web Browser downloads HTML page that 
includes JAVA applets references. 
10 2. Web Browser retrieves JAVA applet from HTTP 

Server. 

3 . The Java virtual machine embedded in Web 
Browser loads the applet and starts it. 

4. The applet is now running on the client and 
15 invokes the Order Server using CORBA. 



Universal Account Device (Figure 14) 

The Universal Account Device, or UAD, is a PIN 
database that can be used for any pre-paid service. The 
UAD implementation preferably uses Oracle 8.0. The UAD 

20 Entity Relationship Diagram is based on a very simple, 
two-entity model, as shown in Figure 14. Simultaneous 
pre-paid transactions using the same account is possible as 
long as business rules are well defined. The introduction 
of such business rules allowing simultaneous use can be 

25 described as Soft Locking versus Hard Locking that locks 
out anyone else when the pre-paid account is being used. 
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Output Pevice 

The output device is the counterpart to the input 
device, in the sense that it is in charge of managing the 
TDR after transactions have taken place; namely, queuing, 
5 pull interface for the business application, and so forth. 
The output device also supports multiple transactions 
queues and multiple client TDR retrieval. 

JAVA Applications 

As shown in Figure 15, JAVA applications 
10 preferably use the J' Express 3.0 Full Java installation 
product, which includes: 

• The TransactionServer 

• The OnLineDecisionSystem 

• The RealTimeEngine 

is Fault Tol eran ce 

Fault tolerance is required for the TxS Trader 
and for each TxS node. Visibroker provides fault tolerance 
by starting instances on multiple hosts. If a client is 
connected to an object implementation, and the connection 

20 is lost, the Visibroker Smart Agent detects the loss and 
automatically reconnects the client to another instance. 
However, Trader and TxS are object implementations that 
maintain states, which means that a lost connection will 
not be transparent to the client. Visibroker provides 

25 events 1 handler mechanisms to bring the state of a replica 
implementation up to date. 
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koad Balancing 

With Load Balancing, requests can be 
automatically routed to different servers so as to 
dynamically balancing the request load. Visibroker uses 
5 Smart Stubs to provide load balancing (The smart stub 
invokes the least loaded of several equivalent remote 
objects) * 



Administration cm 

First stage is a simple administration GUI that 

10 enables an administrator to change device configurations 
without bringing down the TxS. This mainly includes add/ 
remove programs /prefixes to and from a TxS . At the present 
time, TxS devices are preferably loaded from a file at 
start up time and cannot be changed unless a TxS shutdown 

15 is performed. Second stage will include a slicker 
interface intended for commercial use (i.e., device 
graphical representations, additional information 
supervision information) . 



SNMP Agent 

20 The SNMP agent (e.g., Java Advent) provides an 

interface to a manager application so that the TxS can be 
supervised and monitored. This interface preferably 
contains : 

• A set of variables that facilitates monitoring 
25 (the manager can invoke set and get operations 

for these variables) , 
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A set of Trap messages (these messages can be 
sent to the manager upon detection of an abnormal 
condition or for example when a variable goes 
above or beyond a pre-defined threshold) . 



5 Counter Agent 

The motivation behind the counter agent is a licensing 
policy based on transaction volume and number of 
occurrences. For example, a license fee might be paid for 
the first 10 million transactions, with upgrade fees being 
10 required if a predefined threshold is exceeded. A counter 
agent will manage transaction counting. If invoked, the 
counter agent will have the ability to shut down the TxS 
upon reaching a predetermined threshold limit. 



OTS Interfaces and X/OPEN Mapping 
15 Figure 16 illustrates X/Open and OTS Interfaces with 

respect to a credit/debit example. The main OTS interfaces 
are : 

1. Current is a CORBA pseudo object that makes it 
easy for clients to use OTS. Clients invoke begin and 

20 commit operations. 

2 . Coordinator is implemented by the transaction 
service. Recoverable objects use it to coordinate their 
participation in the transaction. Phase#l occurs when the 
coordinator asks each participant to vote (prepare 

25 operation) . If all participants agree, coordinator performs 
phase#2 (asks all participants to commit) . 
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3. Resource: recoverable server object participating 
in a two-phase commit (Prepare operation is the vote) 

Transac tion . M anagement and Transaction Shipping 

The objective of transaction shipping is to minimize 
5 the number of CORBA messages in roaming situations. In a 
roaming situation, a transaction ships or travels from one 
TxS to another. Therefore, it globally consists of 
consecutive run sequences executed on different TxS 
devices. The global transaction can also be seen as an 
10 execution path: The same TxS may of course appear several 
.times in an execution path but two adjacent TxS are 
necessarily different. 

A run sequence consists of several operations. The 
outcome of one operation determines what the next operation 
15 is. The transaction ships if the next operation cannot be 
executed locally. 

A TxS knows what its own capabilities are (they are 
loaded from the TxS devices file at start time or updated 
via the administration GUI application) . A transaction 
20 thread can determine at any time from end user request 
properties if a local device can perform the next operation 
or if shipment needs to occur. 

Each TxS caches the other TxS it establishes 
communication with. TxS-to-TxS communication mainly occurs 
25 for shipping transactions. When a TxS needs to ship a 
transaction to another TxS, it first looks it up in its TxS 
cache. The alternative is: 
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1. The looked-up TxS is not found in the cache. It 
asks the trader the name of the TxS that can perform the 
operation, gets a reference to that TxS (CORBA bind) , 
caches the reference and ships the transaction, and 
5 2 . The looked-up TxS is found in the cache . The TxS 

just uses the cached remote reference (with no preparatory 
ping!) and tries to ship the transaction. If the first 
shipping attempt fails, that means the cached reference is 
obsolete. The obsolete reference is removed from the cache 
10 and the TxS does as if the reference had not been found in 
the cache in the first place. 

DESIGN DIAGRAMS 
This section of the description provides further 
details of the technical design utilizing the UML notation. 
15 Class diagrams will first be presented, followed by a TRS 
interaction diagram for the shipments which occur in a 
typical roaming situation . 

CLASS DIAGRAMS 

20 Transaction Inheritance Tree (Figure 17) 

The TxS is capable of dealing with different business 
models. Each transaction sub-class matches a business 
model (e.g.: pre-paid, post-paid, and so forth), containing 
all the behaviors required for implementing that model . 

25 Each transaction is a sequence of operations whose 
execution order is coded in each subclass . Upon 
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termination of an operation (or transaction step) , the 
sub-class analyzes its outcome and decides what the next 
one will be and if a shipment needs to occur. The 
transaction super- class holds necessary information for 
5 general transaction management (transaction state, 
reference to the local TxS, next operation to be executed, 
etc. ) 

Transaction Data Rec ord (Figure 18) 

The TDR aggregates all the information that pertains 
10 to a transaction. It consists of three data groups: 

1. General: Identification, State, Begin and End 
Time Dates 

2. End User Request: Origin, Type (the kind of 
transaction that is requested: pre-paid, post-paid, etc... 

15 PIN, Prefix; and 

3 . Service Data Request : Record return by the 
Service Device proceed call. Price, quantity, Additional 
properties specific to the service device. 

As the transaction progresses and possibly travels 
20 around, the TDR builds up. It is completed when the last 
step of the transaction has been executed. The shippable 
transaction class is only used for shipping. Its purpose 
is to make shipments as small as possible. One needs to be 
able to create a shippable transaction from a transaction 
25 (at shipment time) and vice versa (upon receipt of a 
shipped transaction) . The shippable transaction only 
consists of the next step to be executed and the TDR. 
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TxS and Devic es (Figure 19) 

The TxS class is the TxS engine. It is associated 
with device implementations through the five interfaces: 
input device, account device, rating device, service device 
5 and output device. The role of the TxS devices is 
described elsewhere herein. The TxS engine manipulates its 
devices only through its interfaces and does not know about 
device implementations. Device implementation classes are 
chosen at start-up time. When a TxS starts up, its 
10 advertises its responsibilities to the TxS Trader. The TxS 
uses the TxS Trader to locate other TxSs across the 
network. 

Request^ and Transaction Creation (Figure 20) 

When an end user request or a shipped transaction 
15 comes in, the TxS just hands it over to the transaction 

manager that is in charge of creating the corresponding 

transaction sub- class and starting a transaction thread. 

The TxS uses the transaction manager through an 

interface . 

20 The transaction manager uses the transaction creator 
through an interface. The transaction creator can carry 
out three different operations: 

1. Turn an end user request into a transaction 
interface reference (a new request has come in) 
25 2. Turn a shippable transaction into a transaction 

interface reference (a shipped transaction has come in) 

3 . Turn a transaction interface reference into a 
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shippable transaction (a shipment needs to occur) . 

The transaction manager always manipulates 
transactions through the transaction interface and does not 
know anything about transaction subclasses . The only class 
5 that needs to know about transaction sub-classes is the 
transaction creator. 

TRS Inte raction ^ 

Figure 21 depicts object interaction for the 
transaction shipments that occur in the typical roaming 
10 situation. In this example, the transaction is initiated 
on the foreign TxS and first ships on to home TxS to 
execute the following transactions steps: 

AD.pinStatus, 

AD.pinBalanceAndLock, and 
15 RD . maxQuantity . 

It then ships back to the Foreign TxS for proceeding with 
the service device. It ships again to Home TxS to execute: 

RD . rate , 

AD . pinDebit , and 
.20 OD.queueTdr. 

We claim: 



WO 99/44165 PCT/US99/04132 

- 28 - 

1. A method of performing a pre-paid electronic- 
2 commerce transaction for a user having a personal 

identification number (PIN) , the method comprising the 
4 steps of : 

receiving a request for goods or services from the 
6 user and creating a transaction instance; 

retrieving account information relating to the user's 
8 PIN, including the user's remaining balance; 

determining whether or not the transaction can take 
10 place as a function of the user's remaining balance; 

proceeding with the transaction and servicing the 
12 request if the user's account is sufficiently funded; 

generating an unrated service data record; 
14 calculating the purchase price of the requested goods 

or services based upon the service data record; 
16 updating user's remaining balance; and 

generating or updating a transaction data record. 

2. The method of claim 1, wherein the transaction 
2 occurs over the internet . 

3. The method of claim 1, wherein the transaction 
2 occurs over an intranet . 

4. The method of claim 1, wherein the transaction 
2 occurs over an extranet . 



5. The method of claim 1, wherein the request is 
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2 received through a point-of-sale (POS) terminal. 

6. The method of claim l, further including the step 

2 Of: 

denying further service requests when a predetermined 
4 threshold is reached, thereby enforcing usage limits. 

7. The method of claim l, wherein the input device 
2 forms part of a web page. 

8. The method of claim 1, wherein the input device 
2 is a virtual device. 

9. The method of claim 8, wherein the virtual device 
2 allows the user to: 

select a pre-paid method of payment, and 
4 enter the user's PIN and password. 

10. The method of claim l, wherein the step of 
2 calculating the purchase price of the requested goods or 

services occurs in real time. 

11. The method of claim 10, wherein the purchase 
2 price is a dollar or less. 

12. The method of claim 1, wherein: 

2 the steps associated with receiving the request from 

the user and servicing the request are performed at a first 
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4 location; and 

one or more of the other steps are performed at one or 
6 more different locations. 

13. The method of claim 12, wherein one of the 
2 different locations is associated with requesting a 

payment, and wherein that location passes accounting and 
4 rating information to the first location. 

14. The method of claim 1 ; further including the step 
2 of providing the user with an estimated purchase price 

before a purchase is made. 

15. The method of claim 1, further including the step 
2 of providing the user with a history of payments . 

16. The method of claim 1, further including the step 
2 of allowing the user to move funds from a bank or credit 

card account to increase the remaining balance . 

17. The method of claim 1, wherein the input device 
2 forms part of a personal digital assistant. 

18. An architecture facilitating e-commerce 
2 transactions, comprising: 

a) an input device for receiving a request for goods 
4 or services from a user having a personal identification 
number (PIN) ; 
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6 b) an account device for performing account - 

management functions, including account balance and PIN 
8 verification operations; 

c) a rating device for calculating the price of the 
10 requested goods or services; 

d) a service device for fulfilling the request; 

12 e) an output device for maintaining one or more 

transaction data records; and 
14 f ) a transaction manager coordinating the operations 

of a) through e) . 

19. The architecture of claim 18, including 
2 transactions which occur over the internet. 

20. The architecture of claim 18, , including 
2 transactions which occur over an intranet. 

21. The architecture of claim 18, including 
2 transactions which occur over an extranet . 

22. The architecture of claim 18, including 
2 transactions which originate at a point-of-sale (POS) 

terminal . 

23. The architecture of claim 18, wherein the input 
2 device is an internet web page. 

24. The architecture of claim 23, wherein the virtual 
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2 device allows the user to: 

select a pre-paid method of payment, and 
4 enter the user's PIN and password. 

25. The architecture of claim 18, wherein at least 
2 the rating device and the service device support 

micropayments . 

26. The architecture of claim 18, wherein the input 
2 device and the service device are disposed at a first 

location, and one or more of the other devices are disposed 
4 at one or more different locations. 

27. The architecture of claim 18, wherein the rating 
2 device is operative to provide the user with an estimated 

purchase price before a purchase is made. 

28. The architecture of claim 18, wherein the input 
2 device is operative to provide the user with a history of 

payments . 

29. The architecture of claim 18, wherein the output 
2 device supports multiple service data record queues. 

30. The architecture of claim 18, wherein the account 
2 device is operative to move funds from a bank or credit 

card account to increase the remaining balance. 
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31. The architecture of claim 18, wherein the input 
2 device forms part of a personal digital assistant. 

32. A method of performing a pre-paid electronic- 
2 commerce transaction, comprising the steps of: 

a) providing the architecture of claim 18; 
4 b) receiving a request from a user through the input 

device; 

6 c) creating a transaction instance through the 

transaction manager; 
8 d) performing PIN authorization, lock and remaining 

balance retrieval through the account device; 
10 e) invoking the rating device to determine whether 

or not the transaction can take place given the user's 
12 remaining balance; 

f) proceeding with the transaction through the 
14 service device if the PIN is sufficiently funded; 

g) fulfilling the request if the PIN is sufficiently 
16 funded; 

h) returning an unrated service data record through 
18 the service device; 

i) calculating a purchase price using the rating 
20 device; 

j ) updating the PIN balance and unlocking the PIN 
22 using the account device; and 

k) creating multiple TDR queues. 
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